search

mapbox / mapbox-maps-android

Interactive, thoroughly customizable maps in native Android powered by vector tiles and OpenGL.
https://www.mapbox.com/mobile-maps-sdk
Other
476 stars 133 forks source link

Provide maven-metadata.xml within Maven repo for Mend Renovate to work. #2387

Open 0legg opened 5 months ago

0legg commented 5 months ago

New Feature

Right now Mend Renovate attempts to fetch maven metadata from standard maven coordinates https://api.mapbox.com/downloads/v2/releases/maven/com/mapbox/maps/maven-metadata.xml to populate the list of versions. Unfortunately, this file is not available (curl -u mapbox https://api.mapbox.com/downloads/v2/releases/maven/com/mapbox/maps/android/maven-metadata.xml returns 404), so Renovate fails to generate the list of versions and decide if the update is required. Using the same credentials it's possible to fetch the actual artifact (example: curl -u mapbox https://api.mapbox.com/downloads/v2/releases/maven/com/mapbox/maps/android/11.4.0/android-11.4.0.aar), so the token we're using is valid and uses the proper DOWNLOAD:READ permissions.

Providing the valid maven-metadata will allow to utilize Renovate (or other similar tool like dependabot) and ensure timely updates.

Why

Mend Renovate eases the pain of maintaining up-to-date library set in our apps, and Mapbox usually evolves pretty fast, so we want to be on the latest version possible without spending extra efforts on the release monitoring.

ravenfeld commented 2 weeks ago

I have the same problem with dependabot, have you found a solution?